Glossary

The process of analysing the access of individuals or systems to an organisation's IT resources.

The identification and authentication of human and non-human actors, the authorisation and control of their access, and the monitoring of access activities.

Identity, credential and access management services including identity providers, directories, authentication and authorisation enforcement capabilities and credential stores.

When a victim’s personal details are stolen and used to perpetrate crime, commonly fraud. Identity theft is a serious crime and can result in long-term and far-reaching negative consequences for victims.

Internet Engineering Task Force

Internet Key Exchange

Emails that attempt to impersonate a trusted individual or company in an attempt to gain access to corporate finances or data.

A scam where a dishonest individual will try to convince you to make a payment or give personal or financial details by claiming to be from a trusted organisation.

Authentication services operated independently within the OT environment to reduce reliance on non-OT and external systems.

A set of statements used to inform expert judgement about whether an action should be rated not effective, partially effective or effective.